On May 13, 2013, at 1:04 PM, chris_bon...@selinc.com wrote: > 1) The relative timestamp is 8 bytes, the "left" and "right" components > are 32-bit integers representing the left and right-hand side of the > decimal point, respectively
Seconds and 1/2^32ths of a second? Speaking of timestamps, what goes into the pcap or pcap-ng time stamp field (those are absolute timestamps)? _______________________________________________ tcpdump-workers mailing list tcpdump-workers@lists.tcpdump.org https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers
